CVE-2026-64494Patch

LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 1 signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-25: 3Patch / Workaround · 2026-07-25: 3Technical Details · 2026-07-25: 107-25
Signal classification1 categories
Patch
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Patch

    CVE-2026-64494 In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get… https://www.cve.org/CVERecord?id=CVE-2026-64494

    Post summary

    The Linux kernel’s gp2ap002 light driver had a runtime PM leak on read error, which has been fixed in the kernel. No exploitable code or active misuse is reported.

    000011.7K
    57.9K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-64494 In the Linux kernel, the following vulnerability has been resolved: iio https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64494

    Post summary

    The post notes that CVE-2026-64494 in the Linux kernel's iio component has been resolved, implying a patch has been applied, but offers no additional technical or exploitation details.

    0000193
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-64494 In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get… https://www.cve.org/CVERecord?id=CVE-2026-64494 ----- Traducción: CVE-2026-64494 En … http://infoflow.cloud`

    Post summary

    CVE-2026-64494 is a Linux kernel runtime PM leak that has been fixed; no PoC, exploit, or active exploitation is reported.

    0000027
    95 followersView on X

Explore more